Quantum interactive proofs with weak error bounds 



Tsuyoshi Ito* 



Hirotada Kobayashi^ 



John Watrous* 



Abstract 



This paper proves that the computational power of quantum interactive proof systems, with a double- 
exponentially small gap in acceptance probability between the completeness and soundness cases, is precisely 
characterized by EXP, the class of problems solvable in exponential time by deterministic Turing machines. 
This fact, and our proof of it, has implications concerning quantum and classical interactive proof systems in 
the setting of unbounded error that include the following: 

• Quantum interactive proof systems are strictly more powerful than their classical counterparts in the 
unbounded-error setting unless PSPACE — EXP, as even unbounded error classical interactive proof 
systems can be simulated in PSPACE. 

• The recent proof of Jain, Ji, Upadhyay, and Watrous (STOC 2010) estabhshing QIP = PSPACE rehes 
heavily on the fact that the quantum interactive proof systems defining the class QIP have bounded 
error Our result implies that some nontrivial assumption on the error bounds for quantum interactive 
proofs is unavoidable to establish this result (unless PSPACE = EXP). 

• To prove our result, we give a quantum interactive proof system for EXP with perfect completeness 
and soundness error 1 — 2~ , for which the soundness error bound is provably tight. This establishes 
another respect in which quantum and classical interactive proof systems differ, because such a bound 
cannot hold for any classical interactive proof system: distinct acceptance probabilities for classical 
interactive proof systems must be separated by a gap that is at least (single-)exponentially small. 

We also study the computational power of a few other related unbounded-error complexity classes. 

1 Introduction 

Interactive proof systems IIBab851lGMR89ll are a central notion in complexity theory. It is well-known that IP, the 
class of problems having single-prover classical interactive proof systems with polynomially-bounded verifiers, 
coincides with PSPACE IIFel861 [LFKN921 [Sha92| . and it was recently proved that the same characterization 
holds when the prover and verifier have quantum computers lUJUWlOJ . More succinctly, it holds that 



The two equalities in ^ are, in some sense, intertwined: it is only through the trivial relationship IP C QIP, 
together with the landmark result PSPACE C IP, that we know PSPACE C QIP. While there exist clas- 
sical refinements ||She92[ IMeilOl of the original method of Lund, Fortnow, Karloff, and Nisan IILFKN92I and 
Shamir ||Sha92|| used to prove PSPACE C IP, there is no "short-cut" known that proves PSPACE C QIP 
through the use of quantum computation. 

The opposite containments required to prove the two equalities in the above equation ([Hi are IP C PSPACE 
and QIP C PSPACE, respectively. The first containment is usually attributed to Feldman [ Fel86 1. and can fairly 
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be described as being straightforward to prove. The standard proof, in fact, gives a polynomial-space algorithm 
that computes the optimal acceptance probability for a prover in a classical interactive proof system exactly, with 
this optimal probability expressible as some integer divided by 2^, where k is the maximum number of coin-flips 
used by the verifier. The proof of the containment QIP C PSPACE given in P JIUWlOl . on the other hand, 
is more complicated: it uses known properties of QIP HKWOOl IMW05II to derive a semidefinite programming 
formulation of it, which is then approximated in PSPACE through the use of an algorithm based on the matrix 
multiplicative weights update method IIAK07irWK06ll . UnUke the standard proof of IP C PSPACE, this proof 
depends crucially on the bounded-error property of the quantum interactive proof systems that define QIP. 

There must, of course, be alternate ways to prove QIP C PSPACE, and we note that Wu [WulOl and 
Gutoski and Wu [GW 10] have made advances in both simplifying and extending the proof method of [ JJUWlOl. 
The main question that motivates the work we present in this paper is whether the assumption of bounded-error is 
required to prove QIP C PSPACE, or could be bypassed. Our results demonstrate that indeed some assumption 
on the gap between completeness and soundness probabilities must be in place to prove QIP C PSPACE unless 
PSPACE = EXP. 

To explain our results in greater detail it will be helpful to introduce the following notation. Given any choice 
of functions m : N — ^ N and a, 6 : N — ^ [0,1], where we take N = {0,1,2,...}, we write QIP(?7i,a, 6) 
to denote the class of promise problem^ A = {Ayes^A^o) having a quantum interactive proof systenJl with 
m(|x|) messages, completeness probability at least a{\x\) and soundness error at most 6(|2;|) on all input strings 
X G Ayes U ^no- When sets of functions are taken in place of m, a, or b, it is to be understood that a union is 
implied. For example, 

QIP(po/2/,l,l-2-^"''^)= IJ QIP(m,l,l-2-f), 

m,p(ipoly 

where poly denotes the set of all functions of the form p : N — N for which there exists a polynomial-time deter- 
ministic Turing machine that outputs 1^^"^ on input 1" for all n G N. We will also frequently refer to functions 
of the form /: N — )• [0, 1] that are polynomial-time computable, and by this it is meant that a polynomial-time 
deterministic Turing machine exists that, on input 1", outputs a rational number f{n) in the range [0, 1], repre- 
sented by a ratio of integers expressed in binary notation. Our main result may now be stated more precisely as 
follows. 

Theorem 1. It holds that 

\Jqinpoly,a,a- 2-''°") = QIP(3, 1, 1 - 2-^""'") = EXP, 

a 

where the union is taken over all polynomial-time computable functions a: N — )• (0, 1]. 
The only new relation in the statement of Theorem [His 

EXP C q\V{poly, 1, 1 - 2-2"°'"); (2) 

we have expressed the theorem in the above form only for the sake of clarity. In particular, the containment 

QtinPoly. 1, 1 - 2-^'"'') C QIP(3, 1, 1 - 2-^""'') 



'We formulate decision problems as promise problems IESY84I because using promise problems is more natural than restricting our 
attention to languages in the presence of error bounds. 

^The definitions of quantum computational models based on quantum circuits, including quantum interactive proof systems, is par- 
ticularly sensitive to the choice of a gate set in the unbounded error setting. For our main result we take the standard Toffoli, Hadamard, 
7r/2-phase-shift gate set, but relax this choice for a couple of our secondary results. 
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follows from the fact that 

QIP(m, 1, 1 - e) C QIP(3, 1, 1 - e/(m - l)^) 

for all m € poly and any function e : N — )• [0, 1], as was proved in |[KKMV09il (or an earUer result of IIKWOOl 
with a slightly weaker parameter). The containment 

QIP(3, 1,1- 2-^'"" ) C IJ QlP{poly, a, a - 2'^'°'' ) 

a 

is trivial. The containment 

y qiF{poly, a, a- 2-'^"'"' ) C EXP 

a 

follows from the results of Gutoski and Watrous IIGW07L as a semidefinite program representing the optimal 
acceptance probability of a given quantum interactive proof systenH can be solved to an exponential number of 
bits of accuracy using an exponential-time algorithm ||Kha79[ |GLS88[ INN941I . 

The new containment Q, which represents the main contribution of this paper, is proved in two steps. 
The first step constructs a classical two-prover one-round interactive proof system with one-sided error double- 
exponentially close to 1 for the EXP-complete SUCCINCT CIRCUIT VALUE problem. It will be proved that 
when an instance whose answer is "no" is given to this proof system, provers cannot make the verifier accept 
with probability more than double-exponentially close to 1 even if they are allowed to use a no-signaling strategy, 
i.e., a strategy that cannot be used for communication between them. The second step converts this classical two- 
prover one-round interactive proof system to a single-prover quantum interactive proof system without ruining 
its soundness properties. 

Theorem [Hand its proof have the following three consequences. 

• Unbounded-error quantum interactive proof systems are strictly more powerful than their classical counter- 
parts unless PSPACE = EXP, as unbounded-error classical interactive proof systems recognize exactly 
PSPACE. 

• The dependence on the error bound in the proof in liJJUWlOl is not an artifact of the proof techniques, 
but is a necessity unless PSPACE = EXP. To be more precise, even though a double-exponential gap 
is sufficient to obtain the EXP upper bound by applying a polynomial-time algorithm for semidefinite 
programming. Theorem [T] implies that a double-exponential gap is not sufficient for the PSPACE upper 
bound unless PSPACE = EXP. 

• Our proof of Theorem [T] shows that a quantum interactive proof system can have a completeness-sound- 
ness gap smaller than singly exponential, which cannot happen in classical interactive proof systems. In 
our quantum interactive proof system for EXP, the gap is double-exponentially small, and this is tight in 
the sense that a dishonest prover can make the verifier accept with probability double-exponentially close 
to 1. 

We do not know if the double-exponentially small gap in Theorem [T] can be improved to one that is single- 
exponentially small by constructing a different proof system. 

The two parts of the proof of Theorem [T] mentioned above are contained in Sections|2]and[3] Some additional 
results concerning unbounded-error quantum interactive proof systems are discussed in Section IH 

^The results of Gutoski and Watrous IGW07I establish an EXP upper bound even for interactive proof systems with two competing 
quantum provers, and only mild assumptions on the gate set are needed to obtain this containment. Namely, the containment holds if 
the gate set consists of finitely many gates and the Choi-Jamiolkowski representation of each gate is a matrix made of rational complex 
numbers. 
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2 A no-signaling proof system for EXP with a weak error bound 



As discussed in the previous section, our proof of the containment Q has two parts. This section discusses the 
first part, in which we present a classical two-prover one-round interactive proof system for an EXP-complete 
problem. The proof system will have perfect completeness and a soundness error double-exponentially close to 
1, even when the provers are permitted to employ an arbitrary no-signaling strategy. No-signaling strategies, 
which are defined below, have been considered previously in IIHol09l and IIIKM091 . for instance. 

2.1 Definition of no-signaling proof systems 

In a (classical) two-prover one-round interactive proof system, a verifier is a randomized polynomial-time pro- 
cess having access to two provers (which we will call Alice and Bob). All of the parties are given the same 
input string x. The verifier produces polynomial-length questions to Alice and Bob, receives polynomial-length 
answers from them, and decides whether to accept or reject. 

A verifier V naturally defines a family of two-player one-round games indexed by input strings. A (classical) 
two-player one-round game G = [S, T, Y, Z, vr, R) is determined by finite sets S, T, Y, and Z, a probability dis- 
tribution vr over SxT and a function R: S xT xY x Z ^ [0, 1]- The value R{s, t, y, z) is written as R{y, z\ s,t) 
by convention. This game is interpreted as a cooperative two-player game of imperfect information played by 
two players (Alice and Bob) and run by a third party called the referee, who enforces the rules. First the referee 
generates a pair of questions (s, t) G S* x T according to the probability distribution vr and sends s to Alice and t 
to Bob. Then Alice responds to the referee with an element y ^ Y and Bob responds with z ^ Z. Finally the 
referee decides whether Alice and Bob win or lose, using randomness in the most general situation: Alice and 
Bob win with probability R{y, z\ s,t) and lose with probability 1 — R{y, z \ s, t). Note that if we fix a verifier 
and an input string x £ {0, 1}*, the verifier acts as a referee in some two-player one-round game Gv,x- 

A strategy of players in a two-prover one-round game G = {S, T, Y, Z, it, R) is a family of probability 
distributions ps^t over Y x Z indexed by (s, t) £ S xT, where the value Ps,t{y, z) represents the probability with 
which Alice replies with the string y and Bob replies with the string z under the condition that the verifier sends 
the question s to Alice and the question t to Bob. It is customary to write z\s,t) instead of Ps.t{y, z). The 
strategy is said to be no-signaling if the following no-signaling conditions are satisfied: 

1. No-signaling from Alice to Bob: 

^ p{y, z\s,t) = ^ p{y, z I s', t) 
y& y& 

for all s, s' e 5, t e T, and z & Z. 

2. No-signaling from Bob to Alice: 

I s,t) = I s,t') 

for all s€ S,t,t' € T, and y €Y. 

For functions a, 6: N — )■ [0, 1], a two-prover one-round interactive proof system with a verifier V is said to 
recognize a promise problem A = (ylyes, ^no) with no-signaling provers with completeness probability at least a 
and soundness error at most b if the corresponding games satisfy the following conditions: 

• Completeness. For every x E Ayes, there exists a no-signaling strategy for the game Gv,x that makes the 
verifier accept with probability at least a(|x|). 
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• Soundness. For every x G A^o, every no-signaling strategy for the game Gv,x makes the verifier accept 
with probability at most 

The class of promise problems A having such a two-prover one-round interactive proof system is denoted 
by MIP;j^ft(2, 1). It is known that MIP°^^(2, 1) = PSPACE for all polynomial-time computable functions a, b : 
N (0, i] for which a(n) - b{n) > l/p{n) for some p G poly KKM09llItoT0l . 

2.2 The proof system for EXP and its analysis 

This section describes a (classical) two-prover one-round interactive proof system for EXP with perfect com- 
pleteness (for uncorrelated honest provers) and soundness error double-exponentially close to 1 against arbitrary 
no-signaling provers. The proof system has the additional property that the verifier's questions to the two provers 
are uniformly generated random strings, which will be important in the next section. 

For a Boolean circuit C with N gates gQ,gi, . . . , qn-i, where gate gj is an input to gate gi only if j < i, a. 
pair {N, D) is called a succinct representation of C if D is a Boolean circuit that, given an integer < i < A^ — 1, 
returns the kind of gate gi (ZERO, ONE, AND, OR, or NOT) and the indices of gates from which the inputs to gi 
come (if any). Note that a succinct representation of length n represents a Boolean circuit with at most 2" gates. 
The Succinct Circuit Value problem is the following decision problem. 

Succinct Circuit Value 

Instance: A succinct representation of a Boolean circuit C with A^ gates whose fan-in is at 
most two and an integer < < A^ — 1. 

Question: Does gate g^ have value 1? 

The Succinct Circuit Value problem is EXP-complete (see, e.g.. Theorem 3.31 of fDKOOl). We will give 
a two-prover one-round interactive proof system for SUCCINCT CIRCUIT Value with the completeness and 
soundness conditions stated above. 

Theorem 2. The Succinct Circuit Value problem has a two-prover one-round interactive proof system with 
no-signaling provers with perfect completeness and soundness error 1 — 2"^''*"' for some p G poly, i.e., 

Succinct Circuit Value g MIP^''^ 2-2"°'!' 

Moreover, for some constant q > and infinitely many input strings x, the soundness error of this proof system 
is at least 1 — 2"^'"^' . 

Idea. The idea for the protocol is simple. The honest provers hold the correct values of all gates in a circuit. 
These values have to satisfy exponentially many local constraints, and the verifier checks one of these local 
constraints chosen randomly. It turns out that the local constraints, together with the no-signaling conditions, are 
sufficient to restrict the value of each gate claimed by the provers to the correct value inductively, beginning from 
the constant gates and propagating from the inputs and the output of each gate, concluding the soundness. 

Protocol. Without loss of generality we assume that A^ is a power of two by adding unused gates as necessary. 
The verifier chooses two integers 0<s,t<A^ — 1 uniformly and independently. He sends s to Alice and t to 
Bob. Alice answers all the values of the input gates of gs in the same order as D returns (if any). Bob answers 
the value of gt. The verifier checks the following conditions. 

(a) If s = t, then Bob's answer must be equal to the value computed from Alice's answers (if any) and the kind 
of gate gs. 
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(b) If gt is an input to gate Qs, then the value of gt claimed by Alice must agree with the value claimed by Bob. 

(c) \ft = k, then Bob's answer must be 1. 

The verifier accepts if and only if all the conditions (a)-(c) are satisfied. 

Completeness. Completeness is easy: if the value of gate is 1, then provers who simply answer the requested 
values of gates are accepted with probability 1. 



m < ^ (3) 



Soundness. Now we shall prove that this two-prover interactive proof system has soundness error at most 1 — 
2-0{N) _ ^ _ 2-0(2") ag^jj^st no-signaling dishonest provers. Again we can assume that is a power of two 
without loss of generality. 

Let {N, D, k) be an instance of SUCCINCT CIRCUIT Value, and let Vi G {0, 1} be the value of gate gi 
for < i < N — I. Fix any no-signaling strategy in the two-prover interactive proof system, and let e be the 
probability that this strategy is rejected. We assume e < 1/ {N"^ ■ 3^) and prove that gate g^ has value 1. 

Let e(s, t) be the probability that this strategy is rejected, conditioned on pair (s, t) of questions. Then 

s,t 

which implies for any questions s, t, it holds that 

s',t' 

Let 6{i) be the probability that Bob answers I — Vi when asked i. 
We prove that 

3^ 

by induction on i. 

First we consider the case where g^ is a constant gate. This includes the case of i = 0. As Bob gives a 
wrong answer with probability 6{i) when Bob's question is i, regardless of Alice's question, 6{i) < e{i,i) by 
considering the probabihty that the strategy fails in the test ([a]), which implies 

1 3* 
5{i) < e{i,i) < ^ < 

Suppose i > 1 and gi is not a constant gate. Assume gi is an AND or OR gate, and let ji and j2 be the indices 
of the inputs to gi. First consider Alice's answer in the case where her question is i. If the value of gj-^ claimed by 
Alice when her question is i is wrong, then when Bob's question is ji, either Bob's answer is wrong or Alice's 
and Bob's answers disagree. If their answers disagree, then the verifier rejects by the test ©, and therefore this 
happens with probability at most e(ji, ji) < 1/3^. As Bob's answer is wrong with probability 5{ji) and their 
answers disagree with probability less than 1/3^, the value of gj-^ claimed by Alice when her question is i is 
wrong with probability at most 

Sin) + ^ < -^F^- 

In the same way, the value of gj.-, claimed by Alice when her question is i is wrong with probability at most 

1 3^^ + 1 
SU2) + ^ < -^F^- 

If Bob's answer for i is wrong, then if both questions are i, at least one of the following happens: 



6 



• The value of gj^ claimed by Alice is wrong. This happens with probability less than (S-'^ + l)/3^. 

• The value of gj^ claimed by Alice is wrong. This happens with probability less than (S-'^ + l)/3^. 

• The values of gj-^ and gj^ claimed by Alice are correct, but the value of gi claimed by Bob is wrong. As 
this is detected by the test © of the verifier, it happens with probability at most e(i, i) < 1/3^. 

Therefore, 

. 3-'i + 1 3^2 + 1 1 3* 
^ ~3^^^ ^ 3^^^ ^ 3^ ^ 3^' 
The case where gi is a NOT gate is proved in a similar way. This finishes the inductive case and establishes the 
inequality ^ for all i. 

The inequality Q implies that Bob's answer to question k is equal to Vk with probability greater than 1 — 
3^/3^ > 2/3. On the other hand, by the test ©, Bob's answer to question k is equal to 1 with probability at 
least 1 — e{k, A:) > 1 — 1/3^ > 2/3. These two conditions imply Vf^ = 1. 

Remark. For a function a: N — )• (0, 1], let MIP^^^^(2, 1) denote the class of promise problems having a two- 
prover one-round interactive proof system with no-signaling provers with acceptance probability at least a and 
soundness error strictly less than a. Because the maximum acceptance probability for no-signaling provers can 
be computed exactly by solving an exponential-size linear program [Pre], we have MIPJJ'^^^(2, 1) C EXP for 
any polynomial-time computable function a : N — )• (0, 1] by using any polynomial-time algorithm for linear 
programming IIKha79[|K^4l . Combined with TheoremEl we have MIP°^<^(2, 1) = EXP for any such a. 

Tightness of soundness analysis. We shall prove the "moreover" part of Theorem [2l the double-exponential 
gap is tight for this protocol. This will be used in the next section to prove that the soundness error of the quantum 
interactive proof system for EXP that we construct is at least 1 — 2~'^''°'^ on infinitely many input strings. 

This can be proved by studying the instance of the SUCCINCT CIRCUIT Value problem used by Trevisan 
and Xhafa [TX98|0 Let /i be a positive integer. Consider a circuit C with N = 2h + 2 gates go,gi, . . . , (72/1+1, 
where go and gi are ZERO gates and, for 1 < i < /i, g2i and g2i+i are two identical OR gates whose inputs come 
from 52{j-i) ^rid (72(1-1)+! • Clearly this circuit C has a succinct representation of length polylogarithmic in h. 
Let k = 2h-l. 

Alice and Bob decide their answers as follows. First we describe each prover's marginal probability distribu- 
tion. When Bob is asked either 2i or 2i + 1 where < i < h, he answers 1 with probability l/2^~^ and with 
probability 1 — 1/2'^"*. When Alice is asked 2i or 2i + 1 where 1 < i < h, she answers (1,0) and (0, 1) each 
with probability 1/2'^"*+^, and (0, 0) with probability 1 — 2^'^. The joint distribution of their answers is defined 
as follows. In what follows, (yi, 2/2; denotes that Alice's answer is (yi, 772) and Bob's answer is z. 

• s = t, \_s/2\ = i > 1: Alice and Bob answer (1,0; 1) and (0, 1; 1) each with probability 1/2'^-*+^, and 
(0,0; 0) with probability 1 - 1/2^^"*. 

• [s/2\ =i>l,t = 2{i- 1): Alice and Bob answer (1, 0; 1) and (0, 1; 0) each with probability 1/2^-'+'^, 
and (0,0; 0) with probability 1 - 1/2''"*. 

• [s/2\ = i > 1, t = 2{i — I) + 1: Alice and Bob answer (1,0; 0) and (0, 1; 1) each with probability 
1/2'^-*+!, and (0,0; 0) with probability 1 - l/2^-\ 

• Otherwise: Alice and Bob give their answers in any way as long as the marginal distributions agree with 
the description above (e.g. they answer independently). 

''Note that we cannot avoid a large soundness error simply by restricting the problem to succinct Boolean formula values: with this 
restriction in place, the problem is in PSPACE (Lyn77| . 
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It is easy to check that this strategy is no-signaling. 

With this strategy, the verifier accepts unless t € {0, 1} and Bob answers 1 (which fails in test (tUl). Therefore, 
the verifier accepts with probability at least 1 — l/((/i + 1) • 2^^) > l — 2~^ = 1 — 2~^" for some constant a > 0. 

3 Simulating no-signaling provers with quantum interactive proofs 

In this section we present the second part of the proof of the containment Q, which is a simulation of the 
two-prover one-round interactive proof system described in the previous section by a quantum interactive proof 
system with perfect completeness and unbounded soundness enor. The result in this section can be stated as the 
following lemma. 

Lemma 3. Let e: N — )■ (0, 1). Suppose that a promise problem A = [Ay^s^ A^o) has a two-prover one-round 
interactive proof system with no-signaling provers with perfect completeness and soundness error at most 1 — e. 
Assume moreover that, for each input x G Ayes U Ano, the verifier's questions are chosen uniformly at random 
from the set {0, Ij'^d^l) x {0, for some function k G poly. 

(i) It holds that A G QIP(4, 1, 1 — e^/144), that is, the problem A has a four-message quantum interactive 
proof system with perfect completeness and soundness error at most 1 — e 

( ii) If the original system has soundness error 1 — e' on input x G A^o> then the derived quantum interactive 
proof system has soundness error at least 1 — e'/4 on input x. 

Note that the containment Q follows by applying Lemma [3] to the two-prover one-round interactive proof 
system for the SUCCINCT CIRCUIT VALUE problem with no-signaling provers with perfect completeness and 
soundness error at most 1 — 2^^*"°'^ constructed in the previous section. 

Construction of the protocol. Given an input string x G Ayes U Ano, the verifier in the quantum interactive 
proof system that we construct acts as follows. First, the verifier prepares six quantum registers S, T, S', T', Y, 
and Z in the state |^)ss'I'^)tt'I^)y|0)z' where |<I>) is the following maximally entangled state: 



where k = k{\x\). The four registers S, T, S', and T' are k qubits long, and Y and Z must be long enough to 
hold Alice and Bob's answers in the two-prover one-round protocol. Next, in the first round, the verifier sends 
S, T, Y, and Z to the prover and the prover sends back the same registers. Then, the verifier performs one of the 
following three tests each with probability 1/4, and accepts unconditionally with probability 1/4. 

• Simulation test: The verifier measures S', T', Y, and Z in the computational basis to obtain s, t, y, and z, 
respectively. If the result is accepted by the base two-prover protocol, then the verifier accepts; otherwise 



• Undo-Alice test: The verifier tells the prover that the undo-Alice test is to be performed. He then sends 
registers S and Y back to the prover, and receives S. The verifier then destructively tests whether registers 
S and S' are in state |<I>) or not. If they are, then he accepts; otherwise he rejects. 

'it is possible to replace the coeffieicnt 1/144 with a larger constant at the expense of introducing slight complications in several parts 
in the proof, but we will choose to use simpler arguments rather than trying to maximize the coefficient. 




he rejects. 
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• Undo-Bob test. The verifier tells the prover that the undo-Bob test is to be performed. He then sends 
registers T and Z back to the prover, and receives T. The verifier then destructively tests whether registers 
T and T' are in state |<I>) or not. If they are, then he accepts; otherwise he rejects. 

Note that this verifier can be implemented exactly with the standard ToffoU, Hadamard, vr / 2-phase-shift gate set. 

Proof of completeness and part dn]) of the lemma. Let x € Ayes U ^no- We prove that if there exists a 
no-signaling strategy in the base two-prover interactive proof system that makes the verifier accept with prob- 
ability 1 — e', then the quantum interactive proof system admits a strategy that makes the verifier accept with 
probability 1 — e'/4. 

Let p be the no-signaling strategy in the base two-prover interactive proof system whose acceptance proba- 
bility is 1 — e'. Let 

P^{y\s) = ^p{y,z\s,t), p^{z\t) = ^p(y,z|s,t) 

zeZ y£Y 

be the marginal strategies, which are well-defined because of the no-signaling conditions. The prover in the 
constructed quantum interactive proof system performs the following. Registers S, T, Y, and Z are the prover's 
private registers initialized to 1 0) . 

• In the first round, he performs the following operation on registers S, T, Y, Y, Z, and Z controlled on 
registers S and T being in the state |s)s|i)T" 

|0)stYYZZ ^ l'5>sl*)t Vphj^z\s^ |yy)YYk^>zz- 
This controlled operation changes the global state as follows: 

4El^*0)sS'sl«0)TT't|00)YY|00)zZ 

^ 3,t 

^ ^ El'^^*^SS'sl*^*)TT't E Vp(y.^l lra)YYl^^)zZ- 

s,t y,z 

• In the undo-Alice test, he performs the following operation on registers S, Y, and Y controlled on regis- 
ters S, T, and Z being in the state \s) c\t) j\z) 



l«)sEy^^^|yy)YY^|0)s|00)YY> 

or does nothing if p^{z 1 1) = 0. This controlled operation changes the global state to 

^ El^^O)sS'sl^«)TT'f |00>YY E \jp^{At)\zz)j_i, 
s,t z 

which can be rewritten as 

I^>SS'|0)s|00)yY ^ ^ El*«)TT'f E ^/P^i^) I^^)ZZ 

by rearranging the registers. 
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• In the undo-Bob test, he performs the following operation on registers T, Z, and Z controlled on registers S, 
T, and Y being in the state |s)s|i)Tly)Y" 

l*)tE/^P|^l-)zz^|0)tlOO)zz, 
or does nothing if p^{y \ s) = 0. This controlled operation changes the global state to 

s,t y 

which can be rewritten as 

^ ^ s y 

This strategy passes the undo-Alice and undo-Bob tests with certainty, and passes the simulation test with prob- 
ability 1 — e', resulting in the overall acceptance probability 1 — e'/4. 

In particular, this implies that this quantum interactive proof system has perfect completeness and the state- 
ment in part (ii) of Lemma[3l 

Proof of soundness. We prove the contrapositive: if there is a strategy in the single-prover protocol that is 
accepted with high probability, then the input must be a yes-instance. Fix an instance x G Ayes U and 
a strategy in the single-prover protocol that is accepted with probability 1 — e', where e' < e(|x|)^/144. We 
prove that there is a no-signaling strategy for Alice and Bob in the base two-prover protocol that is accepted with 
probability at least 1 — 1 2 \/e' > 1 — e ( | x | ) , implying that x G Ayes ■ As the verifier accepts with probability 1 — e' , 
the simulation test, the undo-Alice test, and the undo-Bob test each succeed with probability at least 1 — 4e'. 

Let register P denote the prover's private space. Without loss of generality, we assume that P is first initialized 
to |0) and that the prover performs a unitary operation U = f/sTYZP in the first round, a unitary operation 
y = VsYP in the second round in the undo-Alice test, and a unitary operation W = Wjzp in the second round 
in the undo-Bob test. Let 1^*) be the state in registers S, T, S', T', Y, Z, and P after the first round: 

I*) = (/s,T, ® ?7styzp)|<I>)ss'I^)tt'|0)yIO)zIO)p- 

Let p{s, t, y, z) be the probability with which the results of the measurement in the simulation test are s, t, y, 
and z: 

p{s,t,y,z) = (s|s,(t|T'(y|Y(^lz(TrsTp|^)(^|)|s)s'|t)T'|y)Yl^)z- 

Note that because the verifier never sends S' or T' to the prover, the reduced state TrsTYZp|^)(^| is not affected 
by the operation by the prover in the first round. Therefore, TrsTYZp|^)(^| is the completely mixed state 7/2^'^ 
on S' and T'. This implies ^ p{s, t, y, z) = 1/2^^ for every s and t. Let 

p{y^z\ s,t) = 2^''p{s,t,y,z). 

We shall show that strategy p is "close" to some no-signaling strategy. For this purpose, we use the notion 
of (5-no-signaling strategies. 
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A strategy pin a two-player one-round game is said to be 5-no-signaling with respect to probability distribu- 
tion TT over the questions if there exist single-prover strategies p^{y \ s) and p^{z \ t) such that 



We will now prove that p is 4\/e'-no-signaling with respect to the uniform distribution over the questions. Toward 
this goal, we define 



and prove the inequalities ([H) and ^ with 5 = 4\/e'. 

Let p be the state of registers S', T, T', and Y after the verifier receives a message from the prover in the 
undo-Bob test: 

P = Trszp(/ss'T'Y ® Wtzp)|^)(^'|(/ss'T'y ® Wij^p). 
The fact that this strategy passes the undo-Bob test with probability at least 1 — 4e' can be written as 

l-($|-rT'ClVs'YP)|^)TT' <4e'. 

We use the following easy lemma, which will be proved at the end of this section. In what follows, ||^||]^ 
denotes the trace norm of a matrix X: \\X\\^ = Ty^/X*X. 

Lemma 4. Let X and y be finite-dimensional Hilbert spaces. Then, for a pure state \ip) ^ X and a density 
matrix p on X ®y, it holds that 




(5) 



(4) 




p - \if){ip\ ® Ttx p\l < Vl - {^KTry p)\ip). 



By LemmalU we have that 



p - ® TrjT' p\l < 4^4? = SVF. 



Take the partial trace over T and note that Trj p = TrsTZp|^)(^| to obtain that 



TrsTZp|^)(1'| TrsTT'Zp|^)(^| < sV?. 



1 



Note that 



Y,Piy,z\s,t) = 2^\s\s,{t\j,{y\yiTTsTzp\^)m\s)s'\t)T'\y) 



Y' 



z 



pHy\s) = 2\s\s,{y\yiTrsTvzp\^)m\s)s'\y) 
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Then, 



-y-y 

s,t y 



y^p{y,z\s,t) -p^{y\s) 



\ (^ls'(*lT'(ylY (lVsTZP|*>(*| - ^ $5 TrsTT'Zp|*>(^|) I S>S' |i>T' l2/>Y 



1 

< - 

- 2 



TVSTZP|*>(*| -1^® TrsTT'Zpl^X^I 



and therefore the inequaUty (HJl is satisfied. The proof of the inequality ^ is analogous. This establishes the 
claim that strategy p is 4\/e'-no-signaling. 

Now we prove that a (^-no-signaling strategy is close to some no-signaling strategy. We use a property of the 
no-signaling conditions shown by Holenstein ||Hol09ll . By applying Lemma 9.4 in liHolOQJ twice, we obtain the 
following. 

Lemma 5. Let p be a 6-no-signaling strategy with respect to a probability distribution n. Then there exists a 
no-signaling strategy p such that 



YT^is,t)^Y\p{y,z\s,t) -p{y,z\s,t)\ < 26. 



The proof of Lemma[5]is the same as that of Lemma 9.5 in IIHol09ll . and is omitted. 
By LemmalU there exists a no-signaling strategy p such that 



IklZl 12\P(y^ z\s,t)- p{y, z\s,t)\< SVP. 



22k ^ 2 

s,t y,z 

As the simulation test succeeds with probability at least 1 — 4e', the no-signaling strategy p makes the verifier in 
the base two-prover protocol accept with probability at least 

1 - 4e' - 8\/F > 1 - UV? > 1 - e{\x\). 

By the soundness of the base two-prover protocol, it must hold that x G Ayes- Therefore, the quantum interactive 
proof has soundness error at most 1 — e^/144. 

In the rest of the section, we will prove Lemma|4l We use the following variant of Winter's gentle measure- 
ment lemma IIWin99ll . proved by Ogawa and Nagaoka IQN07I1 . 

Lemma 6. Let Hbe a finite-dimensional Hilbert space. For a density matrix p onT-L and a Hermitian matrix A 
on % such that both A and ly^ — A are positive semidefinite, it holds that 

Hp - \/IpVI||i < 2y/Tv p{Iu- A). 

Proof of LemmaM Let Y = {{ip\ (g) Iy)p{\(p) ly), and let A = \ip){ip\ ly. Then, it holds that 



ApVA = ApA = \ f){<f \ C^Y, 
TrpA = {ip\(Tryp)\ip). 
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By Lemma[6l it holds that 

||p - \ip){ip\ ®Y\\^< 2^l-{^\{i:Typ)\^). 

which implies that 

llTr;, p - < 2v/l-H(Tryp)|(^). 

Then we have that 

< \\p-w){^\®y\\i + \\w){^\®^'^xp-w){v\®Y\\^ 

= \\p-W){^\®y\\^ + \\Ttxp-y\\^ 

<A^l-{ip\{T,yp)\ip). □ 

4 Additional results 

In this section we mention some additional results about quantum interactive proof systems with unbounded 
error. 

4.1 One-round quantum interactive proofs for PSPACE with a weak error bound 
Theorem 7. It holds that PSPACE C QIP(2, 1, 1 - 2-?'°'2^). 

Proof. The SUCCINCT BiPARTlTENESS problem is the problem of deciding if an exponential-size graph, given 
in its succinct representation, is bipartite. It is known to be PSPACE-complete IL B89.I . It is straightforward to 
construct a two-prover one-round XOR interactive proof system with perfect completeness and an exponentially 
small gap for this problem. (We refer the reader to IICHTW041 IWeh06l for the definition of XOR interactive 
proof systems.) This proves the containment 

PSPACE C eMIPi_i_2-po/,(n)[2]. 
Theorem 5.10 of Cleve, H0yer, Toner, and Watrous IICHTW04II implies that 

eMIPi_i_2-po/,(n) [2] = eMIP*^^_2-p°'y(")[2], 
and the construction of Wehner IIWeh06ll implies 

We obtain the theorem by chaining these inclusions. □ 

4.2 Upper bounds 

One may also consider the power of quantum interactive proof systems when acceptance is defined by a sharp 
threshold value. That is, for any choice of functions m € poly and a : N — )• (0, 1], we may consider the class 
QIP(m, a, < a), defined as the class of promise problems A = (^yes, ^no) having a quantum interactive proof 
system with m ( | x | ) messages that accepts with probability at least a ( | x | ) on inputs x G Ay^s , and with probability 
strictly smaller than on all inputs x G A^o- The notation QMA(1, < 1) is shorthand for QIP(1, 1, < 1). 

The following two theorems concerning these classes are proved. 

In this section, the following mild assumptions are made on the gate set: 
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• The gate set consists of a finite number of gates. 

• The amplitudes of each gate in the gate set are algebraic numbers. 

Without the second restriction, even BQP would contain some undecidable languages; see Theorem 5.1 of 
Adleman, Demarrais, and Huang IIADH97I . 

4.2.1 Upper bound on QIP{poly, a, < a) 

Theorem 8. For any polynomial-time computable function a : N — ?■ (0, 1], it holds that 

QlF{poly, a, <a) C EXPSPACE. 

As stated in the introduction, Gutoski and Watrous IIGW07II give a semidefinite program representing the opti- 
mal acceptance probability of a given quantum interactive proof system. When applied to the class QIP{poly, a, < 
a), with our relaxed assumptions on the gate set, this transformation results in a semidefinite program of expo- 
nential size with algebraic coefficients. The remaining task is to decide whether this semidefinite program has 
the optimal value at least a or less than a. This task can be formulated as an exponential-size instance of the 
Semidefinite Feasibility with Algebraic Coefficients problem. 

Semidehnite Feasibility with Algebraic Coefficients is a problem based on semidefinite pro- 
gramming. Let Q, M, and Q n R be the fields of rational numbers, real numbers, and algebraic real numbers, 
respectively. Each element a of Q n M can be encoded as a triple {f{X), a, b) of the minimum polynomial f{X) 
of a over Q and a, 6 G Q with a < a <b such that a is the only root of f{X) between a and b. (See Section 10.2 
of Basu, Pollack, and Roy I.BPR03il .) 

Semidefinite Feasibility with Algebraic Coefficients 

Instance: Integers n, d > 0, m algebraic real matrices Ai, . . . , Am of size d x d, and m 
algebraic real numbers 6i, . . . , 6^- 

Question: Does there exist a.d x d real matrix X such that Tr AiX = bi for all i? 

The complexity of Semidefinite Feasibility with Algebraic COEFnciENTS is not known. (See Ra- 
mana IIRam97ll for related results.) Although there exist polynomial-time algorithms for semidefinite program- 
ming that compute an approximate solution to an arbitrary precision, they cannot be applied in a straightforward 
way to the Semidefinite Feasibility with Algebraic Coefficients problem. We point out that the 
problem is in PSPACE by using the following result. 

Theorem 9 (Canny ICanSSII ). The problem EXISTENTIAL THEORY OF THE REALS is in PSPACE. That is, 
given a quantifier-free Boolean formula F{xi, . . . , Xk) with atomic predicates of the forms p{xi, . . . , Xk) = 
and p{xi, . . . ,Xk) > 0, where p is a polynomial with integer coefficients given as a list of coefficients in binary 
notation, it is decidable in space polynomial in the length of the formula F whether there exists (xi , . . . , x^) G 
that satisfies F. 

Corollary 10. The problem Semidefinite Feasibility with Algebraic Coefficients is in PSPACE. 

Proof Note that an algebraic number encoded as {f{X),a,b) can be represented as a variable x constrained 
as f{x) = A X — a > A b — X > 0. By using this, we can write down each linear constraint Tr A^X = bi in 
terms of the variables representing the coordinates of X. Moreover, the semidefinite constraint X ^ can be 
written as 3M.X = M'^M, and therefore can be written as polynomial constraints on the coordinates of X. □ 

By combining the semidefinite programming formulation of IIGW07II and the polynomial-space algorithm for 
Semidefinite Feasibility with Algebraic Coefficients, we obtain Theorem[8l 
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4.2.2 Upper bound on QMA(1, < 1) 

Theorem 11. It holds that QMA(1, < 1) C PSPACE. 

Proof. Let L e QMA(1, < 1). The same technique as the proof of QMA C PP by Marriott and Wa- 
trous fMWOSl reduces L to a problem of deciding whether or not an implicitly given exponential-sized matrix A 
has an eigenvalue 1, or equivalently / — ^4 is singular. 

The entries of A are in a field F that depends on the language L as follows. Let ai , . . . , G C be the distinct 
numbers that appear as entries in the natural representations of the gates in the gate set used by the verifier in 
the system for the language L. Let F = Q(q;i, . . . , be the field generated by the adjunction of oi, . . . , 
to the field Q, i.e. the smallest field containing all the rational numbers and ai, . . . , a^. Because ai, . . . , 
are algebraic, F is a finite extension of the field Q. By the primitive element theorem (see e.g. Problem 7.5 of 
IILor06ll ). there exists an algebraic number q € F such that F = Q(a). Let f{t) be the minimal polynomial 
of a over Q and d be the degree of f{t). The field F is isomorphic to the quotient field Q[t\/ {f{t)), by which 
we identify F with the set of polynomials over Q of degree at most d — 1. Using this representation, addition, 
subtraction, multiplication, division, and equality testing of the numbers in F can be performed in NC. 

Using this representation, each entry of A can be computed in PSPACE. Csanky's algorithm IICsa76ll can 
then be used to determine whether I — Ais singular or not in PSPACE. □ 

5 Open problems 

We conclude with a short list of open problems related to quantum interactive proof systems with an unbounded 
error. 

• Is EXP C QIP(2, 1,<1)? 

• We have PSPACE C qiF{poly, 1, 1 - 2-P°^y) C EXP. Where does qiP{poly, 1, 1 - 2~f°'J') he? One 
may try to prove QIP {poly, 1,1- 2~P''^y) = PSPACE by improving the dependence of the parallel time 
of an approximation algorithm for semidefinite programming on the error parameter. Note, however, that 
this is open even for the special case of positive linear programming liTX98il . 

• Is it possible to improve our upper bound of EXPSPACE on QIP{poly, a, < a)? In particular, is it pos- 
sible to avoid resorting to the exact feasibility of a semidefinite program? Or does the succinct version 
of the semidefinite feasibility problem belong to QIP {poly, a,< a)? How small can the gap in accep- 
tance probability between the completeness case and the soundness case be in a quantum interactive proof 
system? 

• Does the containment QMA C PP IIMW05I extend to the unbounded-error case? Our upper bound of 
PSPACE may not hold if perfect completeness is not assumed. 
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